ISC2 to Launch First AI Security Certification Exam in Early 2027
Cybersecurity professionals are on the verge of a significant development in their field, with plans for the inaugural ISC2-approved AI security exam slated for early 2027. This announcement came during the ISC2 Security Congress 2026, held in Denver, Colorado, on October 26. ISC2, the nonprofit organization renowned for its Certified Information Systems Security Professional (CISSP) certification, revealed details about its tenth certification, designed specifically for those in the cybersecurity and AI sectors.
The new credential aims to provide a platform for cybersecurity and AI professionals who wish to demonstrate their expertise in securing AI-enabled environments. The CEO of ISC2, Scott Beale, spoke with Infosecurity about the certification’s current status, emphasizing that it is still in development and has not yet been officially named. Beale remarked that the certification is being “built by cybersecurity professionals, for cybersecurity professionals,” highlighting the grassroots nature of this initiative.
The push for an AI security certification stems from a demand among ISC2 members. According to Beale, there is a strong desire within the organization for ISC2 to boldly venture into the realms of AI safety and security, aiming to establish a new benchmark for professionalism in the industry. This initiative reflects a growing recognition of the importance of security within the rapidly evolving field of artificial intelligence.
In the preliminary development stages, the certification has benefited significantly from the input of approximately 10,000 volunteer professionals worldwide through Job Task Analysis surveys. This robust feedback mechanism underscores ISC2’s commitment to creating a relevant and effective certification exam. Starting from October 26, ISC2 has also initiated a pilot exam phase, designed to offer insights into the domains and topics the examination will cover. The nonprofit organization is aiming to enlist 3,000 volunteers for a beta version of the exam slated for December 2026, with a submission deadline for interested parties set for November 4.
The pilot exam will encompass six key domains critical for assessing candidates’ knowledge, skills, and abilities in securing AI-enabled environments. These focus areas include AI concepts and security fundamentals, governance and ethics, data management and privacy, secure AI architecture, operations and incident response, as well as AI threats and lifecycle management. Each domain will feature specific topics and subtopics meant to guide candidates in understanding the depth of AI security competence the exam seeks to measure.
In a public statement, Casey Marks, COO of ISC2, articulated the significance of the pilot phase. He indicated that it aims to gather “critical evidence” to determine whether the examination accurately measures AI security competence in a reliable, fair, and defensible manner. This rigor is vital for maintaining the integrity of the certification and for ensuring that both employers and professionals can trust what earning the credential signifies.
If the pilot exam phase proves successful, the new AI security certification could be available as early as January 2027, with estimates suggesting a rollout in the first quarter of that year. Along with this ambitious timeline, ISC2 is opening the door for both members and non-members to pursue this credential. The certification is particularly geared toward professionals tasked with the design, deployment, and maintenance of AI and machine learning systems across their entire lifecycle.
To qualify for the new AI security certification, candidates must meet specific eligibility criteria. They should possess at least four years of cumulative, paid full-time experience in either cybersecurity or AI-related fields, including at least two years in cybersecurity and one year in two or more domains outlined in the AI security certification exam. However, individuals holding active ISC2 credentials such as CISSP, ISSAP, ISSEP, ISSMP, CCSP, or CSSLP may fulfill the entire experience requirement for the certification, thereby streamlining the process for established professionals.
During his opening address at the Security Congress, Beale also mentioned that AI-related questions are being incorporated into all existing ISC2 certifications. He highlighted that in the past six months, there has been a significant increase in certificates, webinars, events, and professional development offerings focused on AI safety and security. A notable development in this space is the launch of the Cyber AI Workforce Coalition, announced just days prior on October 20.
Overall, the introduction of the ISC2-sponsored AI security certification is poised to play a crucial role in shaping the future landscape of cybersecurity. By providing a specialized credential that addresses the unique challenges posed by AI technology, ISC2 aims to support professionals in navigating the complexities of AI security, thereby enhancing the overall integrity of the cybersecurity industry.